Secure Distributed Switching and Addressing Using FPGAs

Abstract: This master’s thesis is based on the idea to extend a point-to-point 10 Gbps Ethernet cryptoto a multi-point 10 Gbps Ethernet crypto. The multi-point extension is targeted for a fictiveproduct called Krypet. Extending Krypet to multi-point can be seen as creating a distributed Ethernet switch wherethe ports are Krypet units and the information passed between the ports is encrypted. Problems that occur when this extension is designed are identified and analysed. Some problemexamples are address lookup, session changes and packet switching. Different solutions to the identified problems are presented and these are compared anddiscussed. Requirements on the whole multi-point extension are determined and an architecturebased on the solutions is designed. The architecture is implemented and the resultof the implementation is discussed. The implementation successfully extends the system tomulti-point support and satisfies most of the determined requirements.